Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
File: Rji_aLZnXipaOnki9kd9Kvs1f6w.mft (raw, json)
Hash identifier: /tsglGk3mJiW1BD44QO+0r9ufvm9/6YVa7Z1hQvJDcc=
Subject key identifier: 5A:76:18:76:25:05:8A:CB:EF:C4:A9:C3:9B:58:66:21:54:DE:58:E3
Authority key identifier: 46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
Certificate issuer: /CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Certificate serial: 019D2AA99DE0F8E6703144A4B9FB43F97347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
Manifest number: 0696
Signing time: Thu 26 Mar 2026 15:00:52 +0000
Manifest this update: Thu 26 Mar 2026 15:00:52 +0000
Manifest next update: Fri 27 Mar 2026 15:00:52 +0000
Files and hashes: 1: FyBdBnnCpKvwLLKFiribJRB37w4.roa (hash: 5DLx1xDcX045/FKz8VI0Qh7oVFbB+uzkeft+z/1uHvI=)
2: Rji_aLZnXipaOnki9kd9Kvs1f6w.crl (hash: aJCkzf04emklTOhj2jul5sR0N6ZivoS2cCRsVGD7Pbs=)
3: TkBggeEIG38cTqgeQZJyjYdfERw.roa (hash: TVtGwEq6QFTLzR+0I1131Dy7n+e87d5rFxxyq5eLPbY=)
4: WEVqV3-Rp-d0LXAX2D5pD9lVyK4.roa (hash: /YFcmAE3f+SI8C115sE0xgY4yWWtCJhMHzRULYVE/Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:a9:9d:e0:f8:e6:70:31:44:a4:b9:fb:43:f9:73:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4638bf68b6675e2a5a3a7922f6477d2afb357fac
Validity
Not Before: Mar 26 15:00:52 2026 GMT
Not After : Mar 27 15:00:52 2026 GMT
Subject: CN=5a76187625058acbefc4a9c39b58662154de58e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:41:6a:7f:fa:18:a5:77:da:80:2d:13:60:
b5:3c:bd:1f:f3:f9:b2:56:a7:d4:9a:e0:92:fe:9f:
15:88:ef:f5:8d:72:6f:29:52:09:55:15:cf:96:6e:
9a:e4:44:cd:21:8d:50:59:8d:3e:f0:78:0e:e1:ab:
7a:d6:09:41:bd:e4:cb:9e:7c:8a:19:d5:fb:af:a1:
5d:38:21:ae:69:68:2a:90:b0:55:cd:35:48:ce:26:
fa:71:aa:d3:09:09:25:15:2d:8c:d7:2f:85:f0:5f:
56:f0:bf:36:99:bd:b0:59:d3:c1:7f:d1:c7:14:6a:
a5:e3:4c:d4:9d:82:9f:5a:40:63:87:b8:3a:97:3d:
81:d2:60:63:ce:3e:41:16:ff:fa:9e:0f:30:94:73:
17:71:7b:1c:e8:7d:b0:54:a3:40:2d:0c:d0:34:0a:
05:7c:3d:26:dc:df:df:19:69:3e:c8:9d:37:57:db:
9d:97:d3:99:f7:53:fb:1f:da:a1:d3:14:54:53:9c:
da:81:1d:8d:a6:f0:df:91:a4:67:08:55:a0:0e:ac:
4a:9e:7e:be:93:b6:9d:2b:50:88:d0:06:fe:e2:e8:
69:eb:5e:c3:69:c3:70:2e:ae:62:d9:77:8d:82:02:
6f:d0:51:ec:50:86:06:89:9a:a7:db:ed:f8:8c:9a:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:76:18:76:25:05:8A:CB:EF:C4:A9:C3:9B:58:66:21:54:DE:58:E3
X509v3 Authority Key Identifier:
keyid:46:38:BF:68:B6:67:5E:2A:5A:3A:79:22:F6:47:7D:2A:FB:35:7F:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rji_aLZnXipaOnki9kd9Kvs1f6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e2f615-6ca4-4bf5-9f53-87073f434b03/1/Rji_aLZnXipaOnki9kd9Kvs1f6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:ca:d5:9b:10:05:0d:4f:f1:44:ce:d2:62:d7:3a:13:f7:
cc:e6:16:35:4f:c0:86:10:67:d8:ff:9d:04:0f:e2:23:d5:aa:
24:7b:7b:3b:ed:44:64:27:db:0e:82:36:c9:4c:3f:2b:0f:11:
7d:53:9f:c7:02:39:00:c5:da:04:2d:cb:56:d3:7d:dd:ac:dc:
9d:ab:c5:72:f1:b9:89:fc:85:6a:48:74:be:2b:b0:9a:29:70:
56:de:22:51:a1:7e:39:26:d7:58:21:f2:6f:ed:cc:bb:b6:51:
6c:23:dd:c4:6e:05:47:9f:e5:19:df:85:9f:34:bd:3f:84:de:
7d:8b:bc:89:16:69:ef:da:54:fe:59:72:1c:85:24:94:f9:0f:
5c:62:df:33:f8:66:09:81:cf:e9:d6:e0:a9:20:57:42:14:d6:
65:7b:c7:3f:a0:92:14:b1:7f:cf:f0:20:1c:6d:e7:57:6a:54:
5c:6b:39:d7:d5:d7:0d:33:93:0c:01:58:8d:a3:2e:6e:7b:09:
2b:2e:ee:00:3b:22:2c:97:f6:73:76:73:03:c1:77:9b:a2:51:
b8:39:26:11:3a:8d:2f:a9:cd:5e:85:74:ab:47:6f:8e:11:0f:
79:f8:0a:d4:8a:98:c3:95:57:58:67:fb:be:a8:5a:b6:0c:88:
30:88:d4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 22:05:21 2026 by rpki-client